Privacy policy

Google account data

If you choose Sign in with Google, Google sends us your name, email address, and profile photo. We use that information to create your Everdrift account, sign you in, and show your profile to people in your workspace.

We do not ask Google for access to Gmail, Drive, Calendar, or any other Google product. We do not use Google account data for advertising. We store it with our authentication provider so you can sign in again. You can stop using Google sign-in and ask us to delete the account.

Information we collect

Account. Your email address, name, profile photo, username, time zone, and notification settings. You can sign in with email, Google, or your company’s single sign-on.

Workspace content. Drafts, scheduled and published posts, media, comments, labels, and the members and invites in a workspace. We store this so the people you work with can plan and publish together.

Connected accounts. When you connect Instagram, X, Threads, LinkedIn, YouTube, TikTok, or Pinterest, we store the account identifier, display name, the permission you granted, and an encrypted access token. We use those so we can publish, read replies, and collect the analytics you ask for. We also store the posts and metrics those platforms return. We collect this only to provide the publishing and analytics features you turned on.

YouTube. Everdrift uses YouTube API Services to upload videos to your channel and read their statistics. The YouTube Terms of Service and the Google Privacy Policy apply to that data. You can remove Everdrift’s access at any time by disconnecting the channel in Settings or from your Google Account permissions.

TikTok. Everdrift uses TikTok’s Login Kit and Content Posting API to read your TikTok profile, publish the videos and photos you send to your account, and read their statistics. The TikTok Terms of Service and the TikTok Privacy Policy apply to that data. You can remove Everdrift’s access at any time by disconnecting the account in Settings or from the app permissions in your TikTok settings.

Pinterest. Everdrift uses the Pinterest API to read your Pinterest profile and public boards, create boards and Pins you choose to publish, and read their statistics. The Pinterest Terms of Service and the Pinterest Privacy Policy apply to that data. You can remove Everdrift’s access at any time by disconnecting the account in Settings or from the apps listed in your Pinterest security settings.

Slack. If a workspace connects Slack, we store the Slack workspace name and the messages and files you send to Everdrift so we can turn them into drafts.

Billing. Paid plans are processed by Stripe. We store the plan, subscription status, amounts, and Stripe customer identifier so we can provide the plan you paid for and keep tax records. Stripe collects payment card details. We do not store full card numbers.

Writing assistant. When you use Agent, content review, or another AI feature, we send the prompt, the draft you are working on, and relevant account context to our model providers so they can generate a response. We send this to provide the feature you asked for. We do not use your content to train Everdrift’s own models.

Site and product usage. Our servers record technical details of visits, such as browser type, the page requested, the time of the request, and IP address. We use this to keep the site reliable and to investigate abuse. Inside the app we use PostHog, hosted in the EU, to understand which features are used and to diagnose errors.

How we use information

We use this information to run your workspace, publish posts you schedule, show analytics, send the notifications you turn on, bill for a paid plan, secure the service, and improve Everdrift.

Who we share it with

We share information with the services that operate Everdrift. Processing depends on the features you use.

• Vercel hosts the application and runs its servers.
• Supabase hosts the database, files, and sign-in.
• Stripe processes payments.
• Resend sends email, including login codes and notifications.
• PostHog, hosted in the EU, records product usage and errors.
• Model providers generate writing-assistant responses. We currently send those requests through providers including OpenAI.
• Instagram, X, Threads, LinkedIn, YouTube, TikTok, Pinterest, and Slack receive the content and account data required when you connect them or publish.

People in your workspace can see the posts, comments, and accounts their role allows. We also share information when the law requires it. If a court or other legal process requires us to disclose your information, we will tell you unless the law forbids that notice.

Cookies

We use cookies to keep you signed in, remember your current workspace, and complete a social-account connection. These cookies are required for Everdrift to work. PostHog may store its own identifier to tell usage apart between sessions. We do not use advertising cookies.

Your rights

Depending on where you live, including if the GDPR applies to you, you can ask us to:

• Access the personal information we hold about you.
• Correct information that is wrong.
• Delete your information, which may close your account.
• Restrict or object to certain processing.
• Receive a copy of your information to take elsewhere.
• Object to a decision that has a legal or similarly significant effect and is made only by automated means. Everdrift does not make those decisions about you.
• Complain to a supervisory authority about how we handle your information.

You can update your profile and notification settings in the app. For anything else, email hello@everdrift.app.

How long we keep it

We keep account and workspace information while the workspace is in use. Disconnecting a social account or Slack removes that connection. When you delete a post or other content, we remove it from the product and delete it from our systems after a short period needed for backups and recovery.

When you ask us to delete your account, we delete the personal information tied to it. We may keep a limited record where the law requires it, such as billing records, and we may keep information needed to resolve a dispute or enforce our terms.

Security

Traffic between your browser and Everdrift is encrypted in transit. Access tokens for connected social accounts are encrypted before we store them. Hosting providers encrypt stored data and backups. No method of storage or transmission is perfectly secure, and we cannot promise that unauthorized access will never happen.

Where information is processed

Everdrift uses providers that may process information in the United States, the European Union, and other countries where they operate. If you are in the European Union or the United Kingdom, your information may be transferred outside your country. Where the law requires a safeguard for that transfer, we use one, such as Standard Contractual Clauses.

Changes

We will update this policy when our practices change. If a change is significant, we will email the account owner or post a notice in the product. The date at the top of this page is the latest revision.

Contact

Questions about this policy, or a request to access or delete your information, can go to hello@everdrift.app.